CVE-2017-11294: Adobe Shockwave

Critical severity, CVSS 9.8. EPSS: 8.8% chance of exploitation in the next 30 days.

An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Shockwave: up to and including 12.2.9.199

Published 2017-12-09. Last modified 2026-06-17.